<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div><div apple-content-edited="true"><div style="color: rgb(34, 34, 34); font-family: arial; font-size: small; "><br></div><a href="http://www.digital-district.ca/" target="_blank" style=" font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: rgb(17, 85, 204); background-color: rgb(255, 255, 255); font-family: Times; "><span style="color: rgb(17, 85, 204); font-family: Times; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br class="Apple-interchange-newline" style="color: rgb(17, 85, 204); font-family: Times; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br class="Apple-interchange-newline"></span></a> </div> <br><div><div>On May 21, 2014, at 2:45 , Martin Kosek <<a href="mailto:mkosek@redhat.com">mkosek@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">On 05/21/2014 08:36 AM, Davis Goodman wrote:<br><blockquote type="cite">Hi,<br><br>Lately I’ve been having issues of replication between my server and my 2 replicas.<br><br>I decided I was going to delete my 2 replicas and start over keeping my master intact.<br><br>I wasn`t successfull in getting all 3 servers to replicate to each other. ( it used to work)<br><br>I tried deleting 1 replica after the other one to always keep one of the two available.<span class="Apple-converted-space"> </span><br><br>I had to delete manually the replica host on the master with a bunch of ldapdelete command which worked fine.<br><br>But after many unsuccessful trials of getting everyone to sync I decided to delete my two replicas.<br><br>I went back to my master to use the ldapdelete to remove both host`s records so that I could start over.<br><br>Unfortunately now I’m getting this error.<br><br>ldapdelete -x -D "cn=Directory Manager" -W cn=DNS,cn=freeipa02.mtl.domain.int,cn=masters,cn=ipa,cn=etc,dc=domain,dc=int<br>Enter LDAP Password:<span class="Apple-converted-space"> </span><br>ldap_delete: Server is unwilling to perform (53)<br><span class="Apple-tab-span" style="white-space: pre;"> </span>additional info: database is read-only<br><br><br><br>I’m kinda stuck now with no replicas and no DNS. I could restore the backup prior to the start of the operation but with a master in read-only mode it wouldn’t of much help.<br><br>Any insights would be more than welcome.<br><br><br>Davis<br></blockquote><br>Hi Davis, did maybe some of your ipa-replica-manage crashed in a middle of an<br>operation or an upgrade was interrupted and left the database put in read only<br>mode?<br><br>You can find out with this ldapsearch:<br><br>ldapsearch -h `hostname` -D "cn=Directory Manager" -x -w kokos123 -b<br>'cn=userRoot,cn=ldbm database,cn=plugins,cn=config' -s base<br><br>Check for nsslapd-readonly, it should be put to "off" in normal operation.<br><br>Martin</div></blockquote></div>Ok finally managed to modify the read-only flag.<div><br></div><div>Could prepare my replicas and get them going.</div><div><br></div><div>Everything seems fine but I’m getting this error while setting up the replicas. Should I be concerned about this one:</div><div><br></div><div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update in progress</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update in progress</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update in progress</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update in progress</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update in progress</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update in progress</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">Update succeeded</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);"> [23/31]: adding replication acis</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);"> [24/31]: setting Auto Member configuration</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);"> [25/31]: enabling S4U2Proxy delegation</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);">ipa : CRITICAL Failed to load replica-s4u2proxy.ldif: Command '/usr/bin/ldapmodify -v -f /tmp/tmplpfMNG -H <a href="ldap://freeipa02.mtl.ddistrict.int:389">ldap://freeipa02.mtl.ddistrict.int:389</a> -x -D cn=Directory Manager -y /tmp/tmp4Svn9k' returned non-zero exit status 20</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);"> [26/31]: initializing group membership</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);"> [27/31]: adding master entry</div><div style="margin: 0px; font-size: 11px; font-family: Menlo; background-color: rgb(254, 254, 254);"> [28/31]: configuring Posix uid/gid generation</div><div><br></div><div><br></div><div><br></div><div>the rest seems to work fine.</div><div><br></div><div><div style="color: rgb(34, 34, 34); font-family: arial; font-size: small;"></div></div></div></div></body></html>